Microsoft Virtual PC and Virtual Server Privilege Escalation Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a privilege-escalation vulnerability caused by an error in decoding privileged instructions. Note that this issue affects only systems that do not use hardware-assisted virtualization. Successful exploits may allow local attackers t...

MS09-033: Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (969856)

The remote host is running a version of Virtual PC or Virtual Server that incorrectly validates privilege levels when executing specific instructions in the Virtual Machine Monitor. An attacker who has logged in to a guest operating system running under the affected software can leverage this iss...

Citrix XenCenterWeb (XSS/SQL/RCE) Multiple Remote Vulnerabilities

Exploit for windows platform in category remote exploits ================================================================= Citrix XenCenterWeb XSS/SQL/RCE Multiple Remote Vulnerabilities ================================================================= Secure Network - Security Research Advisory...

Debian: Security Advisory (DSA-1060-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

Design/Logic Flaw

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external Internet interface unless the user selects other options, which might expose the router to unintended incoming traffic from remot...

CVE-2007-5419

The CVE-2007-5419 entry concerns a 3Com 3CRWER100-75 router with 1.2.10ww software. When an optional virtual server is enabled, the device configures the server to accept all source IP addresses on the external interface unless other options are chosen, potentially exposing the router to remote a...

3Com WIFI router remote administration vulnerability.

3Com 3CRWER100-75 is a wireless cable/DSL router widely used here, in israel. The router has a web management interface in it's port 80 available from inside the network. When the administrator assign a virtual server to port 80 In the management web filled under the firewall tab and the line is...

Microsoft Virtual PC/Virtual Server堆溢出漏洞（MS07-049）

BUGTRAQ ID: 25298 CVECAN ID: CVE-2007-0948 Microsoft Virtual PC和Virtual Server都是流行的虚拟机工具，允许在同一台计算机上运行多个操作系统。 Microsoft Virtual PC和Microsoft Virtual Server中存在权限提升漏洞，这可能允许对虚拟机操作系统拥有管理员权限的用户在主机操作系统或其他虚拟机操作系统上运行代码。...

MS07-049: Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

The remote host is running a version of Virtual PC or Virtual Server that is vulerable to a heap overflow that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on the host operating system or others guests. To succeed, the attacker needs administrative...

Microsoft Security Bulletin MS07-049 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

Microsoft Security Bulletin MS07-049 - Important Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege 937986 Published: August 14, 2007 Version: 1.0 General Information Executive Summary This important security update resolves one privately reported vulnerability. Thi...

Microsoft Virtual PC / Virtual Server buffer overflow

Heap based buffer overflow allows guest operation system user with administrative privileges to execute code on host operation system or another guest operation system...

Heap overflow

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."...

CVE-2007-0948

Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS via unspecified vectors related to "interaction and initialization of components."...

Microsoft Virtual PC and Virtual Server Heap Overflow Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a local heap-overflow vulnerability. To exploit this issue, attackers must have administrative privileges for the guest operating system. Attackers may exploit this issue to execute arbitrary code in the context of the host operatin...

Debian DSA-1060-1 : kernel-patch-vserver - programming error

Jan Rekorajski discovered that the kernel patch for virtual private servers does not limit context capabilities to the root user within the virtual server, which might lead to privilege escalation for some virtual server specific operations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Security Best Practice: Familiarize Yourself with the Malicious Code Protector

Malicious Code Protector is a patent-pending technology from Check Point designed to detect buffer overflow attacks. Malicious Code Protector provides highly accurate and efficient detection of attacks through an analysis of executable code in a Virtual Server environment. Designed to detect even...

CVE-2004-2073

Technical details beyond the initial description are not provided in the connected documents; monitor for updates.

CVE-2004-2073

Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command...